Last Updated: March 3, 2026
This Privacy Notice applies solely to the OnBoard application ("OnBoard" or the "Application") operated by M.A.D.E. Media Inc.
This Notice describes how personal data is processed within the OnBoard platform when Clients use the Application to operate fundraising, enrollment, sales, or campaign activities.
This Notice does not apply to:
For personal data collected and processed through campaigns operated using OnBoard:
MM acts as a Data Processor .
The Client operating the campaign acts as the Data Controller .
The Client determines:
MM processes personal data solely in accordance with the Client's documented instructions and contractual agreements.
MM acts as a Data Controller only for limited purposes relating to:
Personal data processed within OnBoard may relate to:
Depending on the campaign configuration determined by the Client, the Application may process:
Identity and Contact Information
Campaign Information
Payment Information
Payment card information is processed by secure third-party payment processors selected by the Client. MM does not store full payment card numbers on its systems.
Account and Platform Information
Support Communications
AI and Audio Processing (If Enabled by Client)
If enabled by the Client, audio recordings may be captured and processed using automated transcription and analytical technologies, including compliance monitoring and quality assurance tools. Such processing may involve automated analysis. Human review may occur where required.
Personal data within OnBoard is processed to:
MM does not use campaign personal data for its own independent marketing purposes.
OnBoard is used by Clients globally, including in:
Where required by applicable law, including but not limited to:
MM processes personal data in accordance with applicable statutory requirements and written Data Processing Agreements with Clients.
Because OnBoard operates globally, personal data may be processed in jurisdictions outside the country where it was collected.
Where required by law, MM implements appropriate safeguards, including:
MM may engage secure third-party service providers to support operation of the Application, including:
All subprocessors are contractually required to process personal data only for authorized purposes and in accordance with applicable data protection laws.
MM retains personal data within OnBoard in accordance with:
When personal data is no longer required, it is securely deleted or anonymized.
MM maintains appropriate technical and organizational safeguards, including:
MM maintains procedures for identifying, documenting, and responding to confidentiality incidents in accordance with applicable law, including Quebec Law 25.
No system can guarantee absolute security; however, MM continuously reviews and enhances its security posture.
MM maintains a formal information security program designed to protect the confidentiality, integrity, and availability of personal data processed within OnBoard.
MM undergoes independent third-party audits and maintains SOC 2 Type II certification covering the Security, Availability, and Confidentiality Trust Services Criteria.
SOC 2 reports and related documentation may be made available to Clients under appropriate confidentiality obligations.
Individuals who participated in a campaign operated through OnBoard and wish to exercise rights such as:
Should contact the organization that operated the campaign.
Individuals located in Quebec have rights under the Act respecting the protection of personal information in the private sector (Law 25), including rights of access, rectification, withdrawal of consent, and, where applicable, data portability.
Where required, MM assists Clients in responding to valid data subject requests.
Individuals located in the European Union, Spain, or the United Kingdom may lodge a complaint with their local supervisory authority.
In accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25), MM has designated its Privacy Officer.
Privacy Officer:
Eric Landy
President, M.A.D.E. Media Inc.
Contact Information:
Questions or complaints regarding the handling of personal information may be directed to the Privacy Officer.
OnBoard campaigns are not intended to collect personal data from children below the minimum age required by applicable law without appropriate consent. If we become aware that personal data has been collected in violation of applicable law, appropriate steps will be taken to delete it.
We may update this Privacy Notice from time to time. Updates will be posted within the Application or on the relevant Client-facing platform with an updated "Last Updated" date.
Dernière mise à jour : 3 mars 2026
Le présent avis s’applique exclusivement à l’application OnBoard (« l’Application ») exploitée par M.A.D.E. Media Inc.
Il décrit la manière dont les renseignements personnels sont traités dans le cadre des campagnes opérées via OnBoard.
Il ne s’applique pas :
Pour les renseignements personnels collectés dans le cadre des campagnes :
MM agit à titre de sous-traitant (Data Processor) .
Le Client agit à titre de responsable du traitement (Data Controller) .
Le Client détermine :
MM traite les renseignements personnels uniquement selon les instructions documentées du Client et conformément aux ententes contractuelles applicables.
MM agit à titre de responsable du traitement uniquement pour des fins limitées liées à :
Selon la configuration de la campagne, l’Application peut traiter :
Les informations de paiement sont traitées par des fournisseurs tiers conformes aux normes de sécurité applicables. MM ne conserve pas les numéros complets de cartes de paiement.
Lorsque des fonctionnalités d’enregistrement audio ou d’analyse automatisée sont activées, les enregistrements peuvent être transcrits et analysés à des fins de conformité ou d’assurance qualité.
OnBoard est utilisée à l’échelle internationale, notamment en Amérique du Nord, en Europe, au Royaume-Uni, en Asie et en Amérique du Sud.
MM traite les renseignements personnels conformément aux lois applicables, notamment :
Lorsque requis, des ententes de traitement des données sont conclues avec les Clients.
Les renseignements personnels peuvent être traités à l’extérieur du pays où ils ont été collectés.
Lorsque requis, MM met en place des mécanismes juridiques appropriés, incluant des clauses contractuelles types ou d’autres mesures de protection reconnues.
MM applique des mesures de sécurité techniques et organisationnelles appropriées, incluant :
MM maintient également des procédures visant à identifier, documenter et gérer tout incident de confidentialité conformément à la Loi 25.
MM détient une certification SOC 2 Type II couvrant des critères de sécurité, de disponibilité et de confidentialité.
Les renseignements personnels sont conservés conformément :
Les données sont supprimées ou anonymisées lorsqu’elles ne sont plus nécessaires.
Les personnes situées au Québec disposent de droits en vertu de la Loi 25, notamment :
Les demandes concernant les données collectées dans le cadre d’une campagne doivent être adressées à l’organisation ayant exploité cette campagne.
Conformément à la Loi 25, MM a désigné un responsable de la protection des renseignements personnels.
Responsable :
Eric Landy
Président, M.A.D.E. Media Inc.
Coordonnées :
Le présent avis peut être mis à jour périodiquement. La date de mise à jour sera indiquée au haut du document.